In order to comply with Safe Harbor, Kahuna’s passwords must be ultra secure. When a new password is submitted, Kahuna’s system must check if the password contains a five character substring of the 10,000 most common passwords. If the password contains any of these substrings, it will not be considered a valid password. One way to get a valid password is to substitute symbols for letters or numbers (i.e. ! instead of i). There is also a UI on the reset password page that tells the user which of the tests the password is passing or failing.
Kahuna does not offer temporary passwords. When a user clicks "Forgot my Password" or Kahuna manually sends a "Send Password Reset", the user gets an email with a temp login and have to immediately has to change his password.